Recommended Driver Scanner

Member Panel

Remember me ?

Forgot password?   

Join the PC Help Forum Team

Join PC Help Forum on Facebook

Join the PCHF Distributed Computing Teams

Try the NEW PC Help Forum Dark style

Link to PCHF from other parts of the Internet
PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Fixed] driving me nuts

[Fixed] Hijackthis! Logs - [Fixed] driving me nuts posted in the Security & Safety forums; Its been a long and winding road that has led me to what looks like a great forum, this is my first post so hi to all I have webroot, ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
Page 1 of 2 1 2 >
  #1  
Old 12-09-2005
Bronze Member
  
Join Date: Dec 2005
Posts: 9
phil0446 - See this Members User comments on their Profile page
Angry [Fixed] driving me nuts
Its been a long and winding road that has led me to what looks like a great forum, this is my first post so hi to all

I have webroot, norton etc running on my machine and I cannot get rid of this bloomin winfixer ad pop.

My antispyware and antivirus etc picks it up and blocks it to a point whereby most of the time the screen pops are blank, however its happening about once every 10 minutes.

It all leads to winfixer, I have been to the Symantec site and followed the regedit instruction to the letter and still the probelm exists. I have even used Hijack this and yet, yes you guessed it, the problems exists.

Can anyone help me, I would rather cut off my leg than rebuild my system from scratch, any help would be fantastic

Thanks

Phil0446
  #2  
Old 12-09-2005
Hengis's Avatar
PCHF Head Honcho
My PC
 
Join Date: Jan 2004
Location: Southern England
Posts: 11,593
PC Experience: Always learning
Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page
Send a message via Skype™ to Hengis
Default
Hi there and welcome to PC Help Forum

We have a fantastic anti-nasties team here and I am sure that one of them, probably the excellent Joe5, will be along soon to give you some more guidance with your problem.


__________________

Pre-Work / System File Checker / Help promote PCHF! / What's inside your PC? / Did we help you? If we did, please consider A Donation
  #3  
Old 12-09-2005
ladygreenwitch's Avatar
HR Director
My PC
 
Join Date: Jul 2005
Location: Bay Area California
Posts: 5,778
PC Experience: PC Illiterate
ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page
Default
:cheesy: How about me Hengis, Will I do? LOL

@Phil, welcome to PCHF from me as well. Can you please follow the instruction for PreWork in my signature, posting back the ewido and HijackThis logs here?

You will want to make sure to follow the instructions exactly, and make sure that your HijackThis is the most current version.

Look forward to your reply,

TTFN

LGW
  #4  
Old 12-10-2005
Hengis's Avatar
PCHF Head Honcho
My PC
 
Join Date: Jan 2004
Location: Southern England
Posts: 11,593
PC Experience: Always learning
Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page
Send a message via Skype™ to Hengis
Default
Originally Posted by ladygreenwitch
:cheesy: How about me Hengis, Will I do? LOL
Of course, sorry me darlin'


__________________

Pre-Work / System File Checker / Help promote PCHF! / What's inside your PC? / Did we help you? If we did, please consider A Donation
  #5  
Old 12-11-2005
Bronze Member
  
Join Date: Dec 2005
Posts: 9
phil0446 - See this Members User comments on their Profile page
Default
hello

Followed all you instructions:-

the Ewido scan took an hour (is this normal?)

As requested log files of the Ewido scan plus the latest hijackthis all in .txt format enclosed

I await with baited breath

Thanks

Phil
Attached Files
File Type: txt hijackthis phil0446 101205.txt (14.1 KB, 1 views)
File Type: txt Scan report_ phil0446 20051210.txt (1.2 KB, 2 views)


  #6  
Old 12-11-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default
Howlong Ewido takes for a scan depends on youre system specs , how big youre HD is , how many files you have and how infected a pc is , but an hour is not that strange.


These can be fixed with hjt:

O2 - BHO: (no name) - {09CAEBA7-0D49-73C1-1706-5D806B71B4EA} - blank (file missing)
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: (no name) - {6CC61831-F1DA-D505-8958-A87F641FD5BD} - blank (file missing)
O2 - BHO: (no name) - {F06D8D0B-61B7-146A-E97C-6AF39C2314E1} - (no file)
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O16 - DPF: Cab1 - http://www.uviewit.com/cgi-bin/uViewIt-Web.cab
O16 - DPF: {0348CD18-6EFE-415B-AF32-58F08FA29B33} (WCSAXrview Control) - http://jogging.dyndns.org:90/wcsarview.cab
O16 - DPF: {7876E4A5-78B7-4020-B08F-C960A1ED54C9} (WebWatch Class) - http://192.168.2.5/Ctl/WinWebPush.cab
O16 - DPF: {8FEED82A-42A6-4117-A803-7EC3EB9339E0} (ClientControl Class) - http://192.168.2.3/plugin/client.cab
O16 - DPF: {A93B47FD-9BF6-4DA8-97FC-9270B9D64A6C} (VaPgCtrl Class) - http://192.168.2.3/plugin/h263ctrl.cab
O16 - DPF: {FAF10F23-0AC1-1213-A139-0F032B2112CA} - http://uk.global-acces.com/7adpower/nat2.exe

And i also see that you have spysweeper and pestpatrol running at the same time , that can cause conflict and performence issues. Its best to use one for real time protection.


Also do you know what these entrys are from?




C:\Program Files\ornu\nslo.exe
O4 - HKCU\..\Run: [Srro] "C:\Program Files\ornu\nslo.exe" -vt ndrv

C:\Program Files\D-Link\IP surveillance\Monitor_DL.exe
O23 - Service: Smart Servellience System Launcher (NB_ST3402) - Unknown owner - C:\Program Files\Smart VS-IP Surveillance System\Launcher_NB.exe


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -
  #7  
Old 12-11-2005
Bronze Member
  
Join Date: Dec 2005
Posts: 9
phil0446 - See this Members User comments on their Profile page
Default
Hi

My HD is 160GB

I have follwed your advice and now only have spysweeper running

I will fix the file with HJT that you have highlighted

As far as the file questions you have raised:-

C:\Program Files\ornu\nslo.exe
O4 - HKCU\..\Run: [Srro] "C:\Program Files\ornu\nslo.exe" -vt ndrv

NO IDEA

C:\Program Files\D-Link\IP surveillance\Monitor_DL.exe
O23 - Service: Smart Servellience System Launcher (NB_ST3402) - Unknown owner - C:\Program Files\Smart VS-IP Surveillance System\Launcher_NB.exe

WEB CAM SOFTWARE

Thanks

Reply
Satellite TV on your PC - over 3000 Channels! Click Here!
Page 1 of 2 1 2 >

Bookmarks

« [Fixed] Help Me | [Resolved] HiJackThis! Log »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

Similar Threads
Thread Thread Starter Forum Replies Last Post
Can you take your driving test??? MadGamer The Lounge 8 12-13-2005 12:47 PM
[Fixed] Anti-spyware popups driving me nuts! Jeroen [Fixed] Hijackthis! Logs 37 11-12-2005 01:49 PM
[FIXED] Help Panda Driving Me Crazy HaRdLoCk Internet Help 12 11-02-2005 09:29 PM

Contact Us - PC Help Forum - Site Map - Privacy Statement - Top
All times are GMT +1. The time now is 06:04 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com